SyncInfrastructurePS.pdb
Static task
static1
Behavioral task
behavioral1
Sample
SyncInfrastructureps.dll
Resource
win10v2004-20240426-en
General
-
Target
SyncInfrastructureps.dll
-
Size
17KB
-
MD5
946b4f87fe200789e8919f18156dbf79
-
SHA1
58436e3d9c82c29cee4446598fc036b91c42750a
-
SHA256
8587932ce02d1f9203c484262ba5153585bcd677991c69088ef0d01a1e824c2e
-
SHA512
e5014fc4223d92361e3128f8ef9de5f9f016bc7c86188d2744af38041dc7b399c739f850398454e5fa30681ff15986e4599a821d82e0218b96fb973a046f94f0
-
SSDEEP
192:cep6XwpkG1ThzQosHYn3osYTZSrmA8T1VNAWYkUlebMq/oIWqZ/WYNwQiJ:L9NhKs3os4SrmA8T1VqOonIWqZ/Wu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SyncInfrastructureps.dll
Files
-
SyncInfrastructureps.dll.dll regsvr32 windows:10 windows x86 arch:x86
91cd08a914ef0f53637cf8893c7cb583
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_XcptFilter
_initterm
malloc
free
_amsg_exit
_except_handler4_common
memcmp
kernel32
GetCurrentThreadId
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
Sleep
DisableThreadLibraryCalls
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
combase
CStdStubBuffer_AddRef
ord12
ord7
ord8
CStdStubBuffer_CountRefs
ord9
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
ord3
NdrCStdStubBuffer_Release
ord6
ord2
CStdStubBuffer_DebugServerQueryInterface
ord11
CStdStubBuffer_Invoke
ord4
ord10
ord5
oleaut32
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserSize
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserSize
BSTR_UserMarshal
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserMarshal
rpcrt4
NdrOleFree
IUnknown_Release_Proxy
NdrOleAllocate
IUnknown_AddRef_Proxy
NdrDllCanUnloadNow
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
IUnknown_QueryInterface_Proxy
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ